VulnerableApp
VulnerableApp copied to clipboard
feat: implement header param injection handling for JWT vulnerabilities
Added handling for header parameter injection in JWTVulnerability.java, addressing the missing attack vector noted in issue #413. Follows https://portswigger.net/web-security/jwt guidelines.
Ref: #413
@preetkaran20, I hope you are well, thanks for your patience! I wanted to consult you if it would be possible for me to upload some unit tests for the level I created. If so, I can create the card, or if you prefer, you could do it.
I remain attentive to your answer.
@preetkaran20, I hope you are well, thanks for your patience! I wanted to consult you if it would be possible for me to upload some unit tests for the level I created. If so, I can create the card, or if you prefer, you could do it.
I remain attentive to your answer.
@leiberbertel It is upto you. I am fine with everything.
@preetkaran20, I hope you are well, thanks for your patience! I wanted to consult you if it would be possible for me to upload some unit tests for the level I created. If so, I can create the card, or if you prefer, you could do it. I remain attentive to your answer.
@leiberbertel It is upto you. I am fine with everything.
@preetkaran20 Okay, in that case, I'll upload the changes.
Hi @preetkaran20, how are you? It's been a while hahaha, the changes are up in my branch.
@leiberbertel Thanks for reminding me. Merging it now.
hahaha, it was a pleasure:) @preetkaran20